CVE Vulnerabilities

CVE-2001-1376

Published: Mar 04, 2002 | Modified: Oct 30, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Buffer overflow in digest calculation function of multiple RADIUS implementations allows remote attackers to cause a denial of service and possibly execute arbitrary code via shared secret data.

Affected Software

Name Vendor Start Version End Version
Radius Ascend 1.16 1.16
Freeradius Freeradius 0.2 0.2
Freeradius Freeradius 0.3 0.3
Radius Gnu 0.92.1 0.92.1
Radius Gnu 0.93 0.93
Radius Gnu 0.94 0.94
Radius Gnu 0.95 0.95
Icradius Icradius 0.14 0.14
Icradius Icradius 0.15 0.15
Icradius Icradius 0.16 0.16
Icradius Icradius 0.17 0.17
Icradius Icradius 0.17b 0.17b
Icradius Icradius 0.18 0.18
Icradius Icradius 0.18.1 0.18.1
Radius Livingston 2.0 2.0
Radius Livingston 2.0.1 2.0.1
Radius Livingston 2.1 2.1
Radius Lucent 2.0 2.0
Radius Lucent 2.0.1 2.0.1
Radius Lucent 2.1 2.1
Radius Miquel_van_smoorenburg_cistron 1.6.1 1.6.1
Radius Miquel_van_smoorenburg_cistron 1.6.2 1.6.2
Radius Miquel_van_smoorenburg_cistron 1.6.3 1.6.3
Radius Miquel_van_smoorenburg_cistron 1.6.4 1.6.4
Radius Miquel_van_smoorenburg_cistron 1.6.5 1.6.5
Radius Miquel_van_smoorenburg_cistron 1.6_.0 1.6_.0
Openradius Openradius 0.8 0.8
Openradius Openradius 0.9 0.9
Openradius Openradius 0.9.1 0.9.1
Openradius Openradius 0.9.2 0.9.2
Openradius Openradius 0.9.3 0.9.3
Radiusclient Radiusclient 0.3.1 0.3.1
Xtradius Xtradius 1.1_pre1 1.1_pre1
Yard_radius Yard_radius 1.0.17 1.0.17
Yard_radius Yard_radius 1.0.18 1.0.18
Yard_radius Yard_radius 1.0.19 1.0.19
Yard_radius Yard_radius 1.0_pre13 1.0_pre13
Yard_radius Yard_radius 1.0_pre14 1.0_pre14
Yard_radius Yard_radius 1.0_pre15 1.0_pre15
Yard_radius Yard_radius_project 1.0.16 1.0.16

References